unknown infection

Forum Guidelines

Read the following topic before creating a new topic in this forum. It contains instructions on the what we would like you to post, which will enable us to help you more quickly.

Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help

Posted Image

Unfortunately, with the amount of logs we receive per day, the average response time is 5 days. I want to assure you, though, that your topic will be looked at and responded to. So please be patient.

Posted Image

DO NOT RUN ComboFix unless requested to.

Posted Image

Only members of the Malware Response Team or Moderators are allowed to help people with logs. Anyone else should refrain from posting to another user's log.

Posted Image

When posting a log please put the type of infection you have in the topic title. IE: Winfixer, Virtumonde, WinTools, WebSearch, Home Search Assistant, etc.

Posted Image

Do not bump your topic. We try to resolve logs on a first come/first served basis. By bumping your log you will be pushed back in line due to the new date of your bump.

5 Pages
« First
←
3
4
5

You cannot start a new topic
This topic is locked

unknown infection No access to I.E and WLM , and problems of update

#61 sempai

noypi

Group: Malware Response Team
Posts: 5,161
Joined: 30-June 06
Gender:Male
Location:3 stars and a sun

Posted 25 July 2011 - 06:55 AM

Please try to press enter after choosing the desired language.

~Semp

You can help me continue the fight against malware by making a donation, Thank you.

If I am helping you and I didn't reply within 48 hours... Please send me a private message.
Topics that are not replied within 5 days will be close. Please don't PM asking for support, post on the Forums instead.
Member of UNITE (Unified Network of Instructors and Trained Eliminators) and ASAP (Alliance of Security Analysis Professionals)

#62 khan123

Member

Group: Members
Posts: 39
Joined: 20-June 11

Posted 25 July 2011 - 07:33 AM

I did it too, and always the same notification

#63 sempai

noypi

Group: Malware Response Team
Posts: 5,161
Joined: 30-June 06
Gender:Male
Location:3 stars and a sun

Posted 25 July 2011 - 07:40 AM

Please give me time to discuss this with colleagues, I will get back to you ASAP.

~Semp

#64 khan123

Member

Group: Members
Posts: 39
Joined: 20-June 11

Posted 25 July 2011 - 08:32 AM

Ok.

Thanks :thumbup2:

#65 sempai

noypi

Group: Malware Response Team
Posts: 5,161
Joined: 30-June 06
Gender:Male
Location:3 stars and a sun

Posted 26 July 2011 - 09:12 AM

Hi,

Can you please try this method instead, let me know how it went.

You will need a USB drive.

Download http://unetbootin.sourceforge.net/unetbootin-xpud-windows-latest.exe & http://noahdfear.net/downloads/bootable/xPUD/xpud-0.9.2.iso to the desktop of your clean computer

Insert your USB drive
Press Start > My Computer > right click your USB drive > choose Format > Quick format
Double click the unetbootin-xpud-windows-387.exe that you just downloaded
Press Run then OK
Select the DiskImage option then click the browse button located on the right side of the textbox field.
Browse to and select the xpud-0.9.2.iso file you downloaded
Verify the correct drive letter is selected for your USB device then click OK
It will install a little bootable OS on your USB device
Once the files have been written to the device you will be prompted to reboot ~ do not reboot and instead just Exit the UNetbootin interface
After it has completed do not choose to reboot the clean computer simply close the installer
Next download http://noahdfear.net/downloads/driver.sh to your USB
Remove the USB and insert it in the sick computer
Boot the Sick computer
Press F12 and choose to boot from the USB
Follow the prompts
A Welcome to xPUD screen will appear
Press File
Expand mnt
sda1,2...usually corresponds to your HDD
sdb1 is likely your USB
Click on the folder that represents your USB drive (sdb1 ?)
Confirm that you see driver.sh that you downloaded there
Press Tool at the top
Choose Open Terminal
Type bash driver.sh
Press Enter
After it has finished a report will be located on your USB drive named report.txt
Remove the USB drive and insert back in your working computer and navigate to report.txt

Please note - all text entries are case sensitive

Copy and paste the report.txt for my review

~Semp

#66 khan123

Member

Group: Members
Posts: 39
Joined: 20-June 11

Posted 27 July 2011 - 11:05 AM

Hello,

I performed the instructions on a clean computer under windows 7

But after that , my computer refuses to boot from the USB.

I have tapped F12, without results.

At startup, the first screen (HP) displays F1, F10, but no F12.

Then , i tried to plug in addition to last charge usb, cd say that you had to burn, one containing driver.sh.

The Welcome screen appears xPUD this time, but just long enough to wedge the same problems with the USB and CD separately.

I read online that a program like UMDSTools2.35.exe could help me solve this problem.

But as you told me not to reinstall my computer, I have not downloaded.

#67 sempai

noypi

Group: Malware Response Team
Posts: 5,161
Joined: 30-June 06
Gender:Male
Location:3 stars and a sun

Posted 28 July 2011 - 08:58 AM

Hi,

Quote

Then , i tried to plug in addition to last charge usb, cd say that you had to burn, one containing driver.sh.

Can you please explain this clearly, sorry but It's unclear to me.

~Semp

#68 khan123

Member

Group: Members
Posts: 39
Joined: 20-June 11

Posted 28 July 2011 - 12:13 PM

Hello,

Your first recommendation that I had to burn a part of the procedure and record the second on usb.

Your second recommendation said that everything should be done on USB, but it did not work either since it refused to boot from USB.

So I plugged the usb and cd, formerly burned.
Unfortunately, the result was the same as for the first procedure, with the cd and usb.

#69 sempai

noypi

Group: Malware Response Team
Posts: 5,161
Joined: 30-June 06
Gender:Male
Location:3 stars and a sun

Posted 29 July 2011 - 08:19 AM

Thanks for the clarification.

Click here to download HijackThis (Version 2.0.4).
Click Download HijackThis Installer.
Save HJTInstall.exe to your Desktop.
Double click on the HJTInstall.exe icon to start the program.
By default it will install to C:\Program Files\Trend Micro\HijackThis
After the final dialogue box it will launch HijackThis.

Click on Open the Misc Tools Section.
Then press Generate StartupList log, making sure that both boxes next to it are checked.
Select Yes at the prompt.
A Notepad file will open, and will automatically be saved in your HijackThis folder.
Paste this log in your next reply.
More information with a screenshot, can be found here.

~Semp

#70 khan123

Member

Group: Members
Posts: 39
Joined: 20-June 11

Posted 31 July 2011 - 03:04 PM

Hello ,

HiJackThis.msi will not install.
Here is the error message:

Can not access the Windows Installer service.
This can occur if windows is in safe mode, or if the windows installer is not installed.
Contact your support personnel for assistance.

#71 sempai

noypi

Group: Malware Response Team
Posts: 5,161
Joined: 30-June 06
Gender:Male
Location:3 stars and a sun

Posted 01 August 2011 - 05:00 AM

Hi,

Please follow the instructions HERE and then try installing HiJackThis again.

This post has been edited by sempai: 01 August 2011 - 05:00 AM

~Semp

#72 sempai

noypi

Group: Malware Response Team
Posts: 5,161
Joined: 30-June 06
Gender:Male
Location:3 stars and a sun

Posted 05 August 2011 - 11:34 PM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days. Please include a link to your topic in the Private Message. Thank you.

~Semp